Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: viCQOswKW8r2QwSOBNbhwbANSPOnsqmvyQUab30bnUw=
Subject key identifier: 42:A8:3F:3A:67:DD:3F:73:3A:5D:ED:1A:CA:48:38:F6:9D:BD:11:76
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 01988DD90991444F33B6F94EC011632F8208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 1080
Signing time: Sat 09 Aug 2025 08:01:07 +0000
Manifest this update: Sat 09 Aug 2025 08:01:07 +0000
Manifest next update: Sun 10 Aug 2025 08:01:07 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: XfS2lad9Jw5pQmlH7lyIZf1cvu+1P09CuUeqf7+luG4=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:09:91:44:4f:33:b6:f9:4e:c0:11:63:2f:82:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Aug 9 08:01:07 2025 GMT
Not After : Aug 10 08:01:07 2025 GMT
Subject: CN=42a83f3a67dd3f733a5ded1aca4838f69dbd1176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:25:c1:2a:b5:c8:38:d9:ca:75:d9:6c:cb:
6a:59:27:3c:4c:56:50:95:1e:10:a6:d8:a9:67:2c:
c6:1c:ac:a5:7d:65:a8:29:ca:fc:58:a7:81:ef:c7:
e8:c1:ad:8f:86:23:39:b2:ef:46:85:f5:d1:9e:75:
d2:ea:6f:26:7c:1e:96:49:b4:ad:b8:a4:b9:6e:67:
2d:f7:28:36:47:a5:6b:4b:33:04:1e:0e:79:1c:93:
dd:df:78:e8:9a:66:79:07:b0:0a:7b:f4:55:21:1f:
7d:b9:0e:d2:7e:8d:e0:40:21:31:1f:fa:d6:6d:49:
ba:b5:8e:08:14:0f:56:ed:75:b4:b9:a7:7a:a6:18:
4e:f6:ec:6a:2d:a7:0c:fb:d9:bb:3e:01:5b:4e:a0:
58:f6:e0:32:59:87:40:89:21:cb:df:a1:fc:19:00:
27:0d:65:bd:61:40:43:6b:08:b6:39:25:6d:0f:93:
89:ae:bd:ab:e2:a7:74:5a:e4:0d:4f:6e:a7:a4:41:
cc:f7:75:42:76:b6:8d:51:b5:c6:a4:c8:27:8c:42:
17:74:86:8f:84:8d:07:f2:8f:87:0a:87:74:48:d5:
cd:92:4b:3b:b5:fe:d8:29:0d:cc:8b:84:54:b7:3e:
05:59:6e:78:ac:b1:df:b2:87:d3:d0:7c:d4:3b:23:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:3F:3A:67:DD:3F:73:3A:5D:ED:1A:CA:48:38:F6:9D:BD:11:76
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:36:c2:d8:32:81:99:37:30:00:48:68:eb:8a:d9:43:29:d8:
c2:25:c8:70:f8:ea:a2:ce:b0:fb:d5:e2:1f:8f:aa:1d:f3:70:
f1:58:cc:be:f8:8a:ed:b0:c4:f1:3f:44:c5:85:69:c3:f1:77:
67:55:87:88:3f:68:12:07:6a:44:29:fb:c0:1a:ce:d0:73:c5:
de:1f:85:53:8f:d1:45:27:b2:7e:bc:9f:72:51:d6:e3:5f:24:
6d:7f:0c:c7:28:d2:2b:8a:c8:21:25:c1:84:4e:7d:88:5c:97:
68:10:05:9a:fb:31:7e:04:e7:dd:ff:7f:c2:30:37:b1:30:3e:
c1:41:d5:14:52:28:9e:5b:71:72:53:2c:79:4d:86:86:10:ff:
b1:61:8f:eb:64:be:66:45:8f:f7:da:6e:2e:11:f4:a0:21:20:
89:f5:d9:d3:8e:b2:34:b7:b7:3f:af:4e:6b:40:1b:c1:b5:7c:
3c:6e:0b:89:5c:cc:c2:c9:74:2f:76:dd:06:12:fa:09:68:3a:
0f:28:ce:ca:a1:db:9a:a0:d3:6f:ab:f0:28:cf:7a:a1:73:69:
be:5d:70:25:63:23:e0:ca:20:ca:f6:69:7a:1a:c0:80:44:1e:
5c:9d:3d:20:bb:f4:70:77:8e:20:38:13:05:89:f0:b0:6b:50:
bb:3a:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:05 2025 by rpki-client